Downloader.a!ea, Won’t be removed by McAfee, is found at C:ProgramDataapi-ms-win-core-memory-l1-1-032.dll

5 pts.
Tags:
DLL
McAfee
McAfee Antivirus
Trojans
Hi! So my windows 7 laptop is infected with a trojan that McAfee identifies as downloader.a!ea. I have attempted to allow McAfee to remove it, to no avail. After multiple restarts, disableing associated processes, attempted manual deletion, and using a .dll trojan dectection and deletion program I am still detecting an infection with McAfee. The file is found at the following location on my harddrive- C:ProgramDataapi-ms-win-core-memory-l1-1-032.dll. When I try to delete it, i am told that it cannot be deleted because it is in use by either chrome, or intel proset wireless event log, the latter of which cannot be shut off. Please help.

Software/Hardware used:
Dell inspiron 15r, 2nd gen i3 processor: chrome, rainmeter, windows7, McAfee

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Gabe9527
    Do you know when you were effected????? If so system restore would help????
    11,005 pointsBadges:
    report
  • Gabe9527
    This might help - Read first as I have not followed the process. http://www.2-viruses.com/remove-roxifind-com#manual
    11,005 pointsBadges:
    report
  • LinuxCiscoman
    Judging by the fact the you called out your 2nd Gen I3, I would say it is safe to assume that you are somewhat savvy. I would advise to use a live bootable Linux distro if you are unable to remove this troublesome file. By booting into Linux, you can mount your harddrive much like a great big flash drive and you should be able to remote the file easily. If for some reason, you are unable to do this, then I suggest we try to found out more information about the file. Otherwise, simply boot into Linux, mount your hardrive and remove.
    860 pointsBadges:
    report
  • Chippy088
    If the AV is telling you the file is in use, close any program using that file and run the AV again. Some antivirus programs will not remove the infection and seem to be a waste of time, as they do nothing about it, and just keep on telling you it is there without solving the prioblem. This is when you need some good help. Firstly change your anti virus software, you are paying for nothing if it can't solve the problem. AVG or Avira can, I use them, and they have free versions you can download. I use a linux OS with Avira on a USB stick with a selection of antimalware adaware detection software. Restart the PC and boot from the USB, and let it do its magic. This will detect and remove the infected file(s) permanently. The only drawback with this method ids you have to replace any .dll files with clean ones when you restart the PC OS, or you can get errors on some of the applications you run. Some OS' will do this when you start up again, but it never hurts to make a list of files deleted. Go to the original software company sites to down load them again, or you could be re-infecting your system.
    4,625 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following